_CreateFileW@28
_DecodePointer@4
_EncodePointer@4
_IsDebuggerPresent@0
_IsProcessorFeaturePresent@4
_LoadLibraryExW@12
_OutputDebugStringW@4
_WriteConsoleW@20
_WriteFile@20
Static task
static1
Behavioral task
behavioral1
Sample
b792bc00f0efd99f4ff451730c20c491_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b792bc00f0efd99f4ff451730c20c491_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
b792bc00f0efd99f4ff451730c20c491_JaffaCakes118
Size
532KB
MD5
b792bc00f0efd99f4ff451730c20c491
SHA1
26f53a01c94a2fae3811f122ea4a217fe7fd8bf7
SHA256
2018c94a69b93a2b7349da58e48087244c6536efb23ec3175c180465a56dca4d
SHA512
83f48a2eae460ce373291e8bd758ade541b882c2d59de3b8be329f25dcfb2d8b37abf8e22fd8c5aea901a1e37a62889f04aa4827a0e359aaee269f1df1c5cb72
SSDEEP
12288:tXf2DMo6GCfdog22HXrFy+344+E9OsDYMbWMKyH/rexOww9E:tv2DBCVx5y+3RxDYv9UCxOwwK
Checks for missing Authenticode signature.
resource |
---|
b792bc00f0efd99f4ff451730c20c491_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WideCharToMultiByte
lstrlenA
lstrcpynA
lstrcpynW
lstrcatA
MultiByteToWideChar
lstrlenW
lstrcatW
lstrcpyW
lstrcpyA
GetSystemTimeAsFileTime
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
RaiseException
RtlUnwind
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
GetStringTypeW
GetProcessHeap
GetStdHandle
GetModuleFileNameW
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LCMapStringW
HeapReAlloc
SetStdHandle
FlushFileBuffers
CloseHandle
_CreateFileW@28
_DecodePointer@4
_EncodePointer@4
_IsDebuggerPresent@0
_IsProcessorFeaturePresent@4
_LoadLibraryExW@12
_OutputDebugStringW@4
_WriteConsoleW@20
_WriteFile@20
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ